CVE-2016-7391

published 2016-11-08

CVE-2016-7391: For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the…

high 7.8 CVSS 3.0

AV L AC L PR L UI N S U C H I H A H

EXPLOIT

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x100010b where a missing array bounds check can allow a user to write to kernel memory, leading to denial of service or potential escalation of privileges.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
nvidia	gpu_driver	>= 340 < 342.00	342.00
nvidia	gpu_driver	>= 375 < 375.63	375.63

CWE-264